Wednesday, January 18, 2017

The Legitimacy of the Latest FBI Hack is Still Being Questioned

A hacker known as CyberZeist, for the second time, hacked the Federal Bureau of Investigation and uploaded account information to Pastebin, according to RT. CyberZeist (CZ), in 2011, breached the FBI’s security with a phishing scam. Internet users attributed the hack to Anonymous—and Anonymous claimed credit for it. Like the 2011 occurrence, Anonymous received lots of attention, thanks to the New Year’s Day paste by CZ. The leak was “totally devoted to the Anonymous Movement.”

The second paste, published January 5, 2017, clarified CZ’s “justifications for all those [the media’s] questions.” (Backup Copy Here) According to his message on Pastebin, news outlets started questioning the reasoning behind the FBI leak—specifically why the attack’s primary goal was to undermine or degrade “the image of the organization behind Plone CMS.” The tweets associated with the current CyberZeist account, @cyberzeist2, potentially led to confusion about the Plone Content Management System.

Many companies use the CMS platform for the security it provides. Google, the CIA, and the FBI are among some of the partners, RT said. CZ mentioned this in the paste, and in part, justified the hack on the FBI’s weaknesses instead of any potential vulnerabilities in the Plone CMS. Similarly, instead of pointing to errors in the Plone CMS itself, he attacked (and verbally berated on Twitter) the companies running said platform.

He warned that including the EU Agency for Network & Information Security, Intellectual Property Rights Coordination Center, and Amnesty International faced the same vulnerabilities. However, in his first paste, he included only a list one 155 accounts. Alleged accounts. He released [Firstname][Lastname]@ic.fbi.gov. Additionally, the SHA1 hash of each password and subsequent salt. 


No comments:

Post a Comment